nerdexam
Citrix

1Y0-371 · Question #65

Scenario: A Citrix Engineer has configured the XenMobile Public Key Infrastructure (PKI) integration with the domain-hosted Certificate Authority (CA). During enrollment the client certificate fails…

The correct answer is A. Configure ClientCertificateMappingAuthentication=True within the CA IIS configuration editor. B. Enable XenMobile PKI service account with "Enroll" permissions on the PKI template. See the full explanation below for the reasoning.

Question

Scenario: A Citrix Engineer has configured the XenMobile Public Key Infrastructure (PKI) integration with the domain-hosted Certificate Authority (CA). During enrollment the client certificate fails to be delivered to a device. The engineer reviews the logs and finds a "401 Unauthorized" error. Which two steps should the engineer take to correct this issue? (Choose two.)

Options

  • AConfigure ClientCertificateMappingAuthentication=True within the CA IIS configuration editor.
  • BEnable XenMobile PKI service account with "Enroll" permissions on the PKI template.
  • CAdd the enrolled user needs to the correct Delivery Group within the XenMobile Console.
  • DAdd the XenMobile service account as a local user within the CA server.
  • EEnable anonymous authentication within the CA IIS server.

How the community answered

(17 responses)
  • A
    82% (14)
  • C
    6% (1)
  • D
    12% (2)

Community Discussion

No community discussion yet for this question.

Full 1Y0-371 Practice